topic Re: enable domain lookup for objects in the policy . in Firewall and Security Management

enable domain lookup for objects in the policy .

sudheerkumar — Tue, 18 Aug 2020 09:39:30 GMT

Currently firewall R80.10 policies are permitted solely based on ip addresses.
Our client is running on dynamic IP. Can we whitelist client domain name from firewall instead of IPs while firewall can handle the dns lookup on client host url ?

DNS servers also not configured on firewall.

Please advise .

Thanks

Re: enable domain lookup for objects in the policy .

G_W_Albrecht — Tue, 18 Aug 2020 09:51:54 GMT

Sorry, i do not understand what you are asking. Using IPs in Firewall policy may or may not be a good idea, also that DNS servers are not configured on firewall which is usually a must. Read the Next Generation Security Gateway R80.40 Administration Guide to learn more...

Re: enable domain lookup for objects in the policy .

sudheerkumar — Tue, 18 Aug 2020 10:12:40 GMT

Firewall Objects are IP addresses . I was asking about using domain name/url in place Ip address.

Re: enable domain lookup for objects in the policy .

Chris_Atkinson — Tue, 18 Aug 2020 10:48:11 GMT

The use case of domain objects is outlined in sk120633, FQDN mode is recommended.

Re: enable domain lookup for objects in the policy .

sudheerkumar — Tue, 18 Aug 2020 10:56:47 GMT

Thanks will check sk120633. Wonder where / which DNS resolve the object dns name ?

Re: enable domain lookup for objects in the policy .

Chris_Atkinson — Tue, 18 Aug 2020 11:56:22 GMT

The DNS settings that you configure in Gaia Web UI / Clish of the Gateway.

Re: enable domain lookup for objects in the policy .

sudheerkumar — Fri, 21 Aug 2020 09:40:51 GMT

I am still confused with the steps.

I need to configure rule for

source - 192.168.12.2 (ex. 118.21.31.42 )
Destination - asd-drs-au.pay.robert.com

I will configure local DNS on gaia

on smart console How to create what object . Please help .

also concerned about sk133313.

Thanks